$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78ccc37b-617d-3256-ad33-76e24181776a.roa File: 78ccc37b-617d-3256-ad33-76e24181776a.roa (raw, json) Hash identifier: S+wE8Osd5f+tTFMNzyovlHDjF86F45hj+DMvHS1V4gU= Subject key identifier: 59:62:57:06:B1:81:8D:61:4B:20:27:DF:C6:E7:E8:F7:6C:4F:55:15 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B05E1423F7184ED5A00B4D520 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78ccc37b-617d-3256-ad33-76e24181776a.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 3939 IP address blocks: 2001:418:7:5::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:42:3f:71:84:ed:5a:00:b4:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=3bc682fa-e9ef-443d-884b-42a286656386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:da:23:97:35:6f:e3:2c:e8:a7:a1:a5:b3: bf:f0:57:3b:bf:f9:7d:45:c0:36:48:8e:9d:e4:83: 8e:27:7c:86:fb:6b:07:98:14:28:6d:14:65:f0:59: 6e:05:7c:c1:23:99:70:9f:b4:8c:80:de:4a:cf:ff: c3:42:8c:47:f4:81:28:cb:46:52:56:5f:62:77:ea: b0:fb:3a:f0:57:4e:81:a5:3d:5f:3b:eb:0b:87:47: 8c:7d:2c:ba:0c:72:21:e2:07:5b:0b:c0:7a:2f:74: ea:63:d6:d9:0a:ea:72:87:70:2c:47:9e:04:54:4f: 88:56:fc:df:67:d7:ce:c2:fa:6a:66:94:56:4a:33: d5:42:de:59:be:1c:81:21:fb:f9:21:00:67:8c:c4: f5:80:6b:b0:30:f4:4e:67:a8:df:f1:53:7b:8e:5a: d7:7c:3a:fe:0e:b1:b1:bb:3b:dd:5c:eb:22:4c:ff: 5c:fe:a6:5a:82:78:6d:cd:ae:c5:5e:04:66:46:bb: 7f:14:b1:3d:3c:83:f4:58:c1:1b:a8:b7:5a:35:6c: bf:4d:4c:fd:3c:36:75:bd:22:cd:78:ff:19:69:cd: 98:60:c5:c8:ad:e9:47:cd:1b:45:d7:cd:1d:33:db: a8:a1:5c:52:99:f6:83:e6:94:f1:20:19:ca:84:66: dd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:62:57:06:B1:81:8D:61:4B:20:27:DF:C6:E7:E8:F7:6C:4F:55:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78ccc37b-617d-3256-ad33-76e24181776a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:7:5::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7d:5f:35:e9:e3:d1:a0:b8:ef:45:f9:dd:1e:f7:5a:2e:26: 12:41:7b:1f:82:37:e5:32:db:b0:12:0d:06:1f:f1:b2:4b:73: 61:3d:89:7b:f7:bb:2e:41:e8:6f:d8:69:bb:5e:cc:a5:15:7a: d9:82:67:11:7a:b4:97:dc:b2:6d:93:fc:bc:ac:21:c1:37:ba: d7:7f:81:f8:df:eb:de:45:13:61:cc:06:36:53:4f:00:22:ab: 5f:3b:1a:db:0a:c0:74:8c:94:be:1a:3c:fe:f6:85:0e:0c:80: 86:51:c2:c9:41:e5:de:fd:2d:d5:9c:8f:7f:5d:ed:6e:f6:7a: 3e:2b:e0:52:c6:6e:3c:d7:54:dd:2a:fc:ba:a1:bd:df:24:e2: f6:b6:a3:85:fd:a7:9a:45:83:67:d1:1c:4b:cc:b2:3b:a7:20: 96:b7:3a:db:bc:9c:87:ad:f1:9d:54:45:6c:25:9a:7a:78:2e: 90:3c:4f:20:a8:a7:fe:00:ef:d0:c3:55:fe:f8:8c:04:be:9d: 2c:23:ee:11:63:f2:03:dd:15:21:4e:bc:ae:76:28:f0:07:60: 04:d7:2d:2e:dc:f7:7a:9b:62:aa:2e:9f:47:6b:b5:bd:4f:11: 1c:a4:6e:6a:b4:97:94:1f:60:9a:37:dd:b5:24:f0:11:fa:24: 7a:1d:68:72 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEsF4UI/cYTtWgC01SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk M2JjNjgyZmEtZTllZi00NDNkLTg4NGItNDJhMjg2NjU2Mzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhDaI5c1b+Ms6KehpbO/8Fc7v/l9RcA2SI6d 5IOOJ3yG+2sHmBQobRRl8FluBXzBI5lwn7SMgN5Kz//DQoxH9IEoy0ZSVl9id+qw +zrwV06BpT1fO+sLh0eMfSy6DHIh4gdbC8B6L3TqY9bZCupyh3AsR54EVE+IVvzf Z9fOwvpqZpRWSjPVQt5ZvhyBIfv5IQBnjMT1gGuwMPROZ6jf8VN7jlrXfDr+DrGx uzvdXOsiTP9c/qZagnhtza7FXgRmRrt/FLE9PIP0WMEbqLdaNWy/TUz9PDZ1vSLN eP8Zac2YYMXIrelHzRtF180dM9uooVxSmfaD5pTxIBnKhGbdBwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFFliVwaxgY1hSyAn38bn6PdsT1UVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzhjY2MzN2ItNjE3ZC0z MjU2LWFkMzMtNzZlMjQxODE3NzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAAH AAUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEATn1fNenj0aC470X53R73Wi4mEkF7H4I35TLbsBINBh/xsktz YT2Je/e7LkHob9hpu17MpRV62YJnEXq0l9yybZP8vKwhwTe613+B+N/r3kUTYcwG NlNPACKrXzsa2wrAdIyUvho8/vaFDgyAhlHCyUHl3v0t1ZyPf13tbvZ6PivgUsZu PNdU3Sr8uqG93yTi9rajhf2nmkWDZ9EcS8yyO6cglrc627ych63xnVRFbCWaengu kDxPIKin/gDv0MNV/viMBL6dLCPuEWPyA90VIU68rnYo8AdgBNctLtz3eptiqi6f R2u1vU8RHKRuarSXlB9gmjfdtSTwEfokeh1ocg== -----END CERTIFICATE-----Generated at Mon Oct 20 10:39:29 2025 by rpki-client